Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Projectgus

#29803de 55,137
8.8CVSS total
Vulnerabilidades · 1
PT-2018-9384
8.8
2018-08-20
Dave Gamble · Cjson · CVE-2018-1000216
**Name of the Vulnerable Software and Affected Versions** cJSON versions 1.7.2 and earlier **Description** The issue is related to a Double Free vulnerability in the cJSON library, which can result in a possible crash or Remote Code Execution (RCE). This can be exploited if an attacker can force the victim to print JSON data, and the exploitability depends on how the cJSON library is used, potentially allowing local or network-based attacks. **Recommendations** For cJSON versions 1.7.2 and earlier, update to version 1.7.3 to resolve the issue.